
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/892F26B4EEF411F0A51D99D83B6F56BC.roa
File: 892F26B4EEF411F0A51D99D83B6F56BC.roa (raw, json)
Hash identifier: j2S/9hhdR71OoPWxIwP3TFKjgMgXC3Tmdl7QnGCMX8E=
Subject key identifier: 90:F0:C2:D2:01:6D:D5:2C:AB:20:90:AF:4A:58:6C:47:CE:E9:79:9C
Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Certificate serial: 0428
Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/892F26B4EEF411F0A51D99D83B6F56BC.roa
Signing time: Sun 01 Mar 2026 17:24:58 +0000
ROA not before: Sun 11 Jan 2026 13:50:49 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139855
IP address blocks: 103.163.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Validity
Not Before: Jan 11 13:50:49 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4766a-696f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:c2:1f:97:7b:50:14:00:f0:ae:10:9b:6e:
90:7d:d3:5d:01:ef:97:6e:b2:61:83:b3:06:72:94:
88:f4:36:f1:01:7b:00:aa:99:34:66:be:a1:ff:2c:
29:81:23:32:83:ca:5d:57:fa:da:ac:db:fc:e7:ef:
a5:fc:d5:6c:29:c0:37:ec:19:23:b2:49:29:dd:44:
e2:ec:ac:f9:81:27:a3:ff:d2:ef:a9:b9:0e:72:b1:
74:35:96:29:5e:ce:b6:3b:32:b8:de:22:e3:8e:de:
69:a1:e0:a7:26:5f:90:cc:f9:42:54:54:ed:40:05:
3e:51:dc:bf:b5:46:3e:a4:88:21:1e:86:73:1a:1c:
0e:de:4b:7b:b7:3c:e7:b9:90:1b:74:c7:16:6e:d1:
88:4a:88:c5:1b:20:90:75:9f:79:5a:cb:b7:dc:f0:
24:8e:97:52:13:2a:f7:d1:b8:97:b0:e9:07:26:8e:
79:1f:c3:32:34:b3:1d:c0:f6:a7:e9:72:16:ab:d6:
dd:f8:ec:ba:08:72:ca:15:0d:c2:74:a4:1b:d3:da:
e7:b2:ee:75:ee:a0:c1:6a:e5:a1:20:57:3c:a8:3e:
dc:7c:ef:05:6f:07:df:22:bc:3b:8d:24:b7:30:0c:
33:8a:3f:b6:c4:6a:eb:a1:5f:cc:d5:bc:07:52:ec:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F0:C2:D2:01:6D:D5:2C:AB:20:90:AF:4A:58:6C:47:CE:E9:79:9C
X509v3 Authority Key Identifier:
keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/892F26B4EEF411F0A51D99D83B6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.121.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:52:f6:ed:7a:d8:f5:5c:30:5e:16:ff:21:e0:4f:5c:ed:ab:
6e:62:3f:4d:42:85:3c:5b:ac:11:47:f6:34:b1:4a:07:4a:74:
25:8c:41:b2:a4:0f:a8:11:cf:28:d6:c3:00:7b:1c:64:29:0f:
ca:93:e2:d6:3d:59:f6:50:b4:0a:91:86:bd:f6:56:28:64:3f:
40:35:37:9c:5f:28:f7:01:36:a0:8a:24:ba:a3:1b:75:1b:ec:
f4:ba:99:99:11:d3:a5:84:21:21:44:1c:b4:e6:f3:00:b3:70:
92:16:8d:1b:6b:f0:db:15:37:8a:b4:6d:a5:3e:0c:89:68:eb:
59:38:f8:36:df:5a:84:b1:0d:cc:64:4e:1d:0d:60:c7:80:05:
f3:4e:ee:d5:17:8c:ec:06:00:19:f1:68:35:12:8d:c3:37:e4:
7e:93:7d:a0:5e:b2:2b:20:5a:c4:67:9f:41:24:36:4b:39:d4:
a0:0c:6b:67:b3:41:5a:d2:cc:ed:f4:50:de:37:e7:5e:77:e5:
d7:cc:d1:41:38:8c:04:a4:f8:31:2e:80:d9:c2:69:46:b5:76:
60:b4:59:d9:43:20:d5:d3:60:c6:d5:b5:4a:47:b1:33:e8:10:
b7:e0:ff:b5:99:c9:a8:70:59:69:2a:aa:aa:0c:f0:0c:33:30:
a2:e1:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:49 2026 by rpki-client